$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: xY8FPI4YR7GpQ7RY+J/JC0/rbqRBbY7vyL7dvMGrJYs= Subject key identifier: B6:C2:74:88:D8:8E:8D:91:54:DD:78:F4:7E:8E:7E:B6:33:D6:6B:EC Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 4270EDF9C561B282A705A1B61F2321478318F72D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01DE Signing time: Sun 26 Oct 2025 20:51:19 +0000 Manifest this update: Sun 26 Oct 2025 20:46:19 +0000 Manifest next update: Thu 30 Oct 2025 07:49:19 +0000 Files and hashes: 1: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 2: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: ZZ431dKzUujVE7wnLR87nUvKLmn+XBKmaxpy5KBW1so=) 3: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 4: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:70:ed:f9:c5:61:b2:82:a7:05:a1:b6:1f:23:21:47:83:18:f7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Oct 26 20:46:19 2025 GMT Not After : Oct 30 07:49:19 2025 GMT Subject: CN=B6C27488D88E8D9154DD78F47E8E7EB633D66BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:5c:b1:33:e3:c3:3a:b2:ba:7e:0c:84:af: 51:db:c0:7e:d7:16:13:18:74:1f:14:fb:be:56:b1: 96:df:75:78:10:74:45:cc:4b:c9:52:94:06:e6:2b: e6:80:e4:01:db:ee:cc:a4:a2:7c:75:a4:9e:47:73: c5:0b:9b:0f:f7:4c:32:61:35:8e:89:0a:5b:8a:13: 59:53:8f:71:83:9c:ba:b7:8f:d1:cc:24:1a:19:0e: c2:be:36:ea:6a:2d:b8:9f:d6:e3:ef:6b:9a:a8:f5: dd:21:a3:28:77:d3:5b:f7:ee:77:cf:85:6f:04:65: a6:06:29:37:7d:b6:31:c3:ee:fe:11:3f:ec:96:6f: 6b:60:e5:ba:2a:d0:ed:42:ac:50:1d:e7:f2:7e:5b: 0a:ca:f4:87:77:49:ae:44:5a:77:3c:33:78:cb:07: 4e:c8:0b:a4:f3:75:39:c0:89:92:70:fa:e0:f9:8a: a1:36:a6:e2:8c:dc:61:54:28:5d:86:a1:9e:bd:4c: 38:78:27:86:29:91:a6:0b:53:43:ee:3f:53:ed:7f: 5e:2e:c2:8e:4c:69:5e:d3:ec:b0:26:f2:94:ab:f9: 9a:6d:cf:33:a6:63:61:58:a5:bb:b3:b0:57:e5:b8: 1c:94:5c:ad:78:68:db:ba:d1:43:4f:b1:27:94:b0: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C2:74:88:D8:8E:8D:91:54:DD:78:F4:7E:8E:7E:B6:33:D6:6B:EC X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4c:f9:59:91:c7:5f:97:b0:0b:f8:cd:e1:44:a3:4e:e9:e1: f3:9c:6f:0a:8b:de:02:fa:15:cd:92:c7:a5:13:a5:d6:75:27: 41:eb:ca:48:08:f6:3a:6b:4c:7c:ea:e1:52:23:e5:be:32:c2: a7:bb:17:68:4a:d4:c5:be:1d:ca:b4:12:b2:47:0c:7c:f5:eb: 38:d3:b6:12:f5:35:48:d5:aa:38:fc:2c:fc:0c:ad:0b:1b:49: 6c:d3:b1:8c:b1:ee:fe:5f:a0:bb:53:1d:c0:91:c1:00:8f:bc: 70:9a:c2:00:0e:ca:49:0b:44:f2:eb:51:9f:23:92:d1:c6:2c: e9:3b:b0:01:80:dc:d4:69:70:8c:f4:13:61:0c:66:07:e8:fa: d1:b3:d3:5a:82:30:75:b9:fe:43:ff:65:ee:cb:c2:55:9e:d6: 40:e5:37:d4:52:39:aa:70:4a:cb:d6:4c:80:45:0f:de:46:d0: 05:f9:9d:c6:6e:f1:3d:42:e5:7f:73:25:8c:2a:76:0c:81:5d: 93:d5:e2:f2:3d:e8:7d:bd:10:83:e4:e5:78:9c:a7:3d:2e:d0: 26:41:43:0f:98:ab:30:26:11:98:dd:09:16:19:ec:43:d1:90: 4b:f6:7d:15:94:f5:62:b2:1b:aa:ec:cf:8e:63:fb:f9:fe:83: 21:ca:bc:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnDt+cVhsoKnBaG2HyMhR4MY9y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTEwMjYyMDQ2MTlaFw0yNTEwMzAwNzQ5MTlaMDMxMTAvBgNV BAMTKEI2QzI3NDg4RDg4RThEOTE1NERENzhGNDdFOEU3RUI2MzNENjZCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHFyxM+PDOrK6fgyEr1HbwH7X FhMYdB8U+75WsZbfdXgQdEXMS8lSlAbmK+aA5AHb7sykonx1pJ5Hc8ULmw/3TDJh NY6JCluKE1lTj3GDnLq3j9HMJBoZDsK+NupqLbif1uPva5qo9d0hoyh301v37nfP hW8EZaYGKTd9tjHD7v4RP+yWb2tg5boq0O1CrFAd5/J+WwrK9Id3Sa5EWnc8M3jL B07IC6TzdTnAiZJw+uD5iqE2puKM3GFUKF2GoZ69TDh4J4YpkaYLU0PuP1Ptf14u wo5MaV7T7LAm8pSr+ZptzzOmY2FYpbuzsFfluByUXK14aNu60UNPsSeUsKgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtsJ0iNiOjZFU3Xj0fo5+tjPWa+wwHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRM+VmRx1+XsAv4zeFEo07p4fOcbwqL3gL6 Fc2Sx6UTpdZ1J0HrykgI9jprTHzq4VIj5b4ywqe7F2hK1MW+Hcq0ErJHDHz16zjT thL1NUjVqjj8LPwMrQsbSWzTsYyx7v5foLtTHcCRwQCPvHCawgAOykkLRPLrUZ8j ktHGLOk7sAGA3NRpcIz0E2EMZgfo+tGz01qCMHW5/kP/Ze7LwlWe1kDlN9RSOapw SsvWTIBFD95G0AX5ncZu8T1C5X9zJYwqdgyBXZPV4vI96H29EIPk5Xicpz0u0CZB Qw+YqzAmEZjdCRYZ7EPRkEv2fRWU9WKyG6rsz45j+/n+gyHKvBE= -----END CERTIFICATE-----Generated at Wed Oct 29 08:04:06 2025 by rpki-client